SharpSCCM
mayyhem/sharpsccmC# post-exploitation tool for abusing Microsoft Configuration Manager (SCCM) to perform lateral movement, credential gathering, and NTLM…
authenticationlateral-movementnetwork-security+3
707
mayyhem/sharpsccmC# post-exploitation tool for abusing Microsoft Configuration Manager (SCCM) to perform lateral movement, credential gathering, and NTLM…
watchtowrlabs/watchtowr-vs-citrix-netscaler-cve-2026-88772Detection artifact generator for Citrix NetScaler CVE-2026-88772 that builds a DTLS pre-auth buffer overflow payload to verify remote code execution.
yym8538/cve-2026-5027Proof-of-concept exploit for CVE-2026-5027, a path traversal and arbitrary file write in Langflow's /api/v2/files endpoint, with Docker lab and…
mrr0b0t19/cve-2026-23744-pocProof-of-concept exploit for CVE-2026-23744, a remote code execution vulnerability in MCPJam Inspector. Demonstrates RCE via crafted HTTP request to…
sardine-web/automated-scanner-cve-2026-41940Automated scanner & post-exploitation toolkit for CVE-2026-41940 — cPanel & WHM root authentication bypass via session-file CRLF injection
dinosn/cve-2026-34197CVE-2026-34197 activemq PoC
omer-efe-curkus/cve-2026-33017-langflow-rce-pocThe vulnerability in Langflow 1.8.1 and earlier allows a remote, unauthenticated attacker to achieve arbitrary command execution on the host.
chaitin/mimicryActive deception tool that transparently migrates attackers from real targets to honeypots during exploitation and post-exploitation, supporting…
nexxp90/cve-2025-55182_rce_exploitREC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized…
xaitax/chrome-app-bound-encryption-decryptionBypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…
master-of-servers/mosePost exploitation tool for configuration management servers.
blue0x1/sqlwindsSQLWinds - SQL Server Security Assessment & Post-Exploitation Toolkit
temp43487580/entrapassthecerttool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it
logangoins/cable.NET post-exploitation toolkit for Active Directory reconnaissance and exploitation
watchtowrlabs/fortijump-exploit-cve-2024-47575Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575
alessandroz/berootPrivilege Escalation Project - Windows / Linux / Mac
watchtowrlabs/cve-2024-40711Pre-Auth Exploit for CVE-2024-40711
m8sec/enumdbRelational database brute force and post exploitation tool for MySQL and MSSQL